containerd x509: certificate sig

containerd x509: certificate signed by unknown authority

配置insecure

[plugins]
  [plugins.cri.registry]
    [plugins.cri.registry.mirrors."myprivate.com"]
        endpoint = [
        "https://myprivate.com"
        ]
  [plugins.cri.registry.configs]
      [plugins.cri.registry.configs."myprivate.com".tls]
        insecure_skip_verify = true

配置secret

kubectl create secret docker-registry -n mynamespace mysec --docker-server=myprivate.com --docker-username=wwq --docker-password=wwq123

pod中

apiVersion: v1
kind: Pod
metadata:
  name: demo
  namespace: mynamespace
spec:
  containers:
    - name: demo
      image: demo:v1
  imagePullSecrets:
    - name: mysec

相关内容

k8s

containerd